I am attempting to modify the FileController controller in Web.Core so the user is required to log in to download a file.
Adding the [AbpMvcAuthorize] to the method causes a 404. Why can't I just add the [AbpMvcAuthorize] annotation to a HTTPGet method?
[AbpMvcAuthorize]
public async Task<ActionResult> File(string fileName)
{
...
}
This annotation works on the HTTPPost methods. I think it is because the AuthToken is set. That is not possible on HTTPGets pasted directly into the browser.